agentworkshop 0.7.6 → 0.7.8

package/scripts/_dbg-setup-e2e.mjs

@@ -0,0 +1,88 @@
+// ============================================================
+// 首启自注册(setup-flow)E2E 验证:_dbg-setup-e2e.mjs <baseURL>
+// 断言链:setup-status=true → 登录门呈现"创建管理员账号"(仅注册页签) →
+// 浏览器真实填表注册 → 进入 workspace → setup-status=false → 登录/me 均 admin。
+// 用法:node scripts/_dbg-setup-e2e.mjs http://127.0.0.1:3002
+// ============================================================
+import puppeteer from 'puppeteer-core'
+import { mkdirSync } from 'node:fs'
+
+const BASE = process.argv[2] ?? 'http://127.0.0.1:3002'
+const CREDS = { name: 'admin', email: 'admin@awshop.local', password: 'Awshop2026' }
+const SHOT_DIR = '.e2e-shots'
+mkdirSync(SHOT_DIR, { recursive: true })
+
+const results = []
+const check = (name, ok, detail = '') => {
+  results.push({ name, ok, detail })
+  console.log(`${ok ? '✔' : '✖'} ${name}${detail ? ` — ${detail}` : ''}`)
+}
+
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+
+// ---- 1. API:初始状态应 needsSetup=true ----
+const s0 = await api('/api/users/setup-status')
+check('setup-status 初始 needsSetup=true', s0.status === 200 && s0.body?.data?.needsSetup === true, JSON.stringify(s0.body?.data))
+
+// ---- 2. 浏览器:登录门 setup 模式 + 真实注册 ----
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--no-proxy-server', '--window-size=1600,1000'],
+})
+try {
+  const page = await browser.newPage()
+  await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+  await page.goto(`${BASE}/workshop`, { waitUntil: 'networkidle2', timeout: 60000 })
+
+  await page.waitForFunction(() => document.body.innerText.includes('创建管理员账号'), { timeout: 30000 })
+  const gateText = await page.evaluate(() => document.body.innerText)
+  check('登录门呈现 setup 模式(创建管理员账号)', gateText.includes('创建管理员账号'))
+  check('setup 模式隐藏登录页签', !gateText.includes('账号登录') || gateText.indexOf('注册管理员') < gateText.indexOf('账号登录'))
+  check('setup 模式隐藏 Token 登录页签', !gateText.includes('Token 登录'))
+  check('提示首个注册账号成为管理员', gateText.includes('首个注册的账号将成为管理员'))
+  await page.screenshot({ path: `${SHOT_DIR}/setup-1-form.png` })
+
+  // 填表:auth-card 内 第1个input=用户名, type=email=邮箱, type=password=密码
+  await page.waitForSelector('.auth-card input')
+  const nameInput = (await page.$$('.auth-card input'))[0]
+  await nameInput.click({ clickCount: 3 })
+  await nameInput.type(CREDS.name)
+  const emailInput = await page.$('.auth-card input[type="email"]')
+  await emailInput.click({ clickCount: 3 })
+  await emailInput.type(CREDS.email)
+  const pwInput = await page.$('.auth-card input[type="password"]')
+  await pwInput.click({ clickCount: 3 })
+  await pwInput.type(CREDS.password)
+  await pwInput.keyboard.press('Enter')
+
+  // 注册成功 → store 置登录态 → 登录门消失,workspace 出现
+  await page.waitForFunction(() => document.body.innerText.includes('Workshop'), { timeout: 30000 })
+  await new Promise(r => setTimeout(r, 1500))
+  const afterText = await page.evaluate(() => document.body.innerText)
+  check('注册后放行进入项目(workspace 呈现)', afterText.includes('Workshop') && !afterText.includes('创建管理员账号'))
+  await page.screenshot({ path: `${SHOT_DIR}/setup-2-entered.png` })
+}
+finally {
+  await browser.close()
+}
+
+// ---- 3. API:注册后状态收敛 + 新管理员可登录 ----
+const s1 = await api('/api/users/setup-status')
+check('注册后 setup-status=false', s1.status === 200 && s1.body?.data?.needsSetup === false, JSON.stringify(s1.body?.data))
+
+const login = await api('/api/users/login', { method: 'POST', body: JSON.stringify({ email: CREDS.email, password: CREDS.password }) })
+check('新管理员密码登录成功', login.status === 200 && login.body?.data?.user?.role === 'admin', JSON.stringify(login.body?.data?.user))
+const me = await api('/api/users/me', { headers: { authorization: `Bearer ${login.body?.data?.token}` } })
+check('/api/users/me 返回 admin 身份', me.status === 200 && me.body?.data?.role === 'admin')
+
+// ---- 4. 注册页签收敛后再注册第二账号应降为普通 user ----
+const reg2 = await api('/api/users/register', { method: 'POST', body: JSON.stringify({ name: 'plainuser', email: 'plain@awshop.local', password: 'Plain2026' }) })
+check('后续注册为普通 user 角色', reg2.status === 200 && reg2.body?.data?.user?.role === 'user', JSON.stringify(reg2.body?.data?.user))
+
+const failed = results.filter(r => !r.ok)
+console.log(`\n===== setup-flow E2E: ${results.length - failed.length}/${results.length} 通过 =====`)
+process.exit(failed.length ? 1 : 0)

package/scripts/_dbg-sim-keeper.mjs

@@ -0,0 +1,100 @@
+/**
+ * 模拟工况看护:每 5s 探测各模拟器端口,死亡则以 detached 方式重启。
+ *   node scripts/_dbg-sim-keeper.mjs           (常驻;Ctrl+C 退出,不影响已拉起的模拟器)
+ *   node scripts/_dbg-sim-keeper.mjs --once    (单轮自愈后退出;供 schtasks 每分钟调度)
+ * 附带 dev server(:3000)看护:死亡且锁 pid 不存活 → 清陈旧锁后重启。
+ */
+import net from 'node:net'
+import { spawn, spawnSync } from 'node:child_process'
+import { openSync, existsSync, readFileSync, unlinkSync } from 'node:fs'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+/** Windows 可靠的 pid 存活探测(process.kill(pid,0) 在 Windows 对死 pid 常误报存活) */
+function pidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false
+  const out = spawnSync('tasklist', ['/FI', `PID eq ${pid}`, '/FO', 'CSV', '/NH'], { encoding: 'utf-8' })
+  const line = (out.stdout ?? '').trim()
+  return line.length > 0 && !/INFO:\s*no tasks/i.test(line)
+}
+
+const repo = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const out = resolve(repo, '.AgentWorkShop', 'data')
+const ONCE = process.argv.includes('--once')
+
+const SIMS = [
+  { name: 'mqtt-http', port: 18830, cmd: 'scripts/dev-protocol-simulators.mjs', env: { MQTT_SIM_PORT: '18830', HTTP_SIM_PORT: '1889' }, log: 'sim-mqtt-http.log' },
+  { name: 'http-sim', port: 1889, cmd: null },
+  { name: 'modbus-tcp', port: 1502, cmd: 'scripts/dev-modbus-simulator.mjs', env: {}, log: 'sim-modbus-tcp.log' },
+  { name: 'opcua', port: 4840, cmd: 'scripts/dev-opcua-simulator.mjs', env: { OPCUA_SIM_PORT: '4840' }, log: 'sim-opcua.log' },
+  { name: 'plc', port: 15040, cmd: 'scripts/dev-plc-simulator.mjs', env: {}, args: ['--port', '15040'], log: 'sim-plc.log' },
+  { name: 'rtu', port: 15030, cmd: 'scripts/_rtu-mini-slave.mjs', env: {}, log: 'sim-rtu.log' },
+]
+
+function portUp(port) {
+  return new Promise((resolveDone) => {
+    const s = net.connect(port, '127.0.0.1')
+    const t = setTimeout(() => { s.destroy(); resolveDone(false) }, 1200)
+    s.on('connect', () => { clearTimeout(t); s.destroy(); resolveDone(true) })
+    s.on('error', () => { clearTimeout(t); resolveDone(false) })
+  })
+}
+
+function launch(sim) {
+  if (!sim.cmd) return
+  const fd = openSync(resolve(out, sim.log), 'a')
+  const child = spawn(process.execPath, [resolve(repo, sim.cmd), ...(sim.args ?? [])], {
+    cwd: repo,
+    env: { ...process.env, NO_PROXY: '127.0.0.1,localhost', no_proxy: '127.0.0.1,localhost', ...sim.env },
+    detached: true,
+    stdio: ['ignore', fd, fd],
+  })
+  child.unref()
+  console.log(`[keeper ${new Date().toISOString()}] ${sim.name} down → respawn pid=${child.pid}`)
+}
+
+async function tick() {
+  for (const sim of SIMS) {
+    const up = await portUp(sim.port)
+    if (!up) launch(sim)
+  }
+  // dev server 看护:down → 锁 pid 活着(启动中)等它;锁 pid 死/无锁 → 清锁重启
+  const devUp = await portUp(3000)
+  if (!devUp) {
+    const lockPath = resolve(repo, '.AgentWorkShop', '.runtime', 'aw.lock')
+    let lockPid = 0
+    try {
+      if (existsSync(lockPath)) {
+        const lock = JSON.parse(readFileSync(lockPath, 'utf-8'))
+        lockPid = Number(lock.pid ?? 0)
+      }
+    }
+    catch { /* 无锁/坏锁 */ }
+    if (lockPid && pidAlive(lockPid)) {
+      // 僵尸 guard:占锁不服务(worker 被外部击杀后 guard 悬挂)→ 强杀进程树再重启
+      spawnSync('taskkill', ['/PID', String(lockPid), '/T', '/F'])
+      console.log(`[keeper ${new Date().toISOString()}] dev-server 僵尸 guard(pid=${lockPid})已强杀`)
+    }
+    try { unlinkSync(lockPath) } catch { /* 无锁 */ }
+    const fd = openSync(resolve(out, 'dev-server.log'), 'a')
+    const child = spawn(process.execPath, ['bin/aw.mjs', 'dev'], {
+      cwd: repo,
+      env: { ...process.env, NO_PROXY: '127.0.0.1,localhost', no_proxy: '127.0.0.1,localhost' },
+      detached: true,
+      stdio: ['ignore', fd, fd],
+    })
+    child.unref()
+    console.log(`[keeper ${new Date().toISOString()}] dev-server down(锁已清)→ respawn pid=${child.pid}`)
+  }
+}
+
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+console.log(`[keeper] watching(once=${ONCE}):`, SIMS.map(s => `${s.name}:${s.port}`).join(' '), '+ dev:3000')
+if (ONCE) {
+  try { await tick() } catch (err) { console.error('[keeper] tick error:', err?.message ?? err) }
+} else {
+  for (;;) {
+    try { await tick() } catch (err) { console.error('[keeper] tick error:', err?.message ?? err) }
+    await sleep(5000)
+  }
+}

package/scripts/_dbg-team-drill.mjs

@@ -0,0 +1,173 @@
+/**
+ * 四引擎班组精简演练(真实服务 + 模拟工况数据):
+ *  lead=omp;worker-dsh=数采(daq_query);worker-codex=数控写入(dcw_control,HITL)+复读;
+ *  worker-opencode=数控读(dcw_read)。单 goal 任务,审批到达即批准,最小 token 消耗。
+ * 运行:node scripts/_dbg-team-drill.mjs
+ */
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3000'
+let failures = 0
+const check = (name, ok, detail = '') => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (ok) passed += 1
+  else failures += 1
+}
+let passed = 0
+const sleep = (ms) => new Promise(r => setTimeout(r, ms))
+const log = (l) => console.log(`[${new Date().toISOString().slice(11, 19)}] ${l}`)
+
+const reg = await fetch(`${BASE}/api/workshop/users/register`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ name: 'drill-' + Math.random().toString(36).slice(2, 8) }) }).then(r => r.json())
+const T = reg?.data?.token
+if (!T) { console.error('注册失败(服务未启动?)'); process.exit(1) }
+const sleep2 = (ms) => new Promise(r => setTimeout(r, ms))
+const api = async (method, path, body, attempt = 0) => {
+  try {
+    const res = await fetch(`${BASE}${path}`, { method, headers: { 'content-type': 'application/json', authorization: `Bearer ${T}` }, body: body !== undefined ? JSON.stringify(body) : undefined })
+    return await res.json().catch(() => ({}))
+  }
+  catch (e) {
+    if (attempt < 3) {
+      await sleep2(1500)
+      return await api(method, path, body, attempt + 1)
+    }
+    throw e
+  }
+}
+
+// ── WS 录制流(事件持久化由首个订阅触发)──
+const { createRequire } = await import('node:module')
+const { WebSocket } = createRequire(import.meta.url)('D:/codes/ABO/AgentWorkShop/node_modules/.pnpm/ws@8.21.3/node_modules/ws')
+
+const seen = []
+let lastSeq = 0
+let ws = null
+function startWs(channelId) {
+  ws = new WebSocket(BASE.replace(/^http/, 'ws') + '/api/workshop/ws')
+  ws.on('open', () => ws.send(JSON.stringify({ type: 'sub', channelId, token: T })))
+  ws.on('message', (raw) => {
+    try {
+      const f = JSON.parse(String(raw))
+      if (f.type === 'hitl.request') log(`[WS] HITL ${f.payload?.kind}: ${String(f.payload?.detail ?? f.payload?.title ?? '').slice(0, 90)}`)
+      if (f.type === 'hitl.resolved') log(`[WS] HITL resolved outcome=${f.payload?.outcome}`)
+      if (f.type === 'task.status') log(`[WS] task ${f.payload?.state} ${(f.payload?.title ?? '').slice(0, 40)}`)
+    }
+    catch { /* ignore */ }
+  })
+  ws.on('error', () => {})
+}
+async function pollEvents(channelId) {
+  const res = await api('GET', `/api/workshop/channels/${channelId}/events?limit=500`)
+  for (const f of (res?.data?.items ?? [])) {
+    if (Number(f.seq ?? 0) > lastSeq) {
+      lastSeq = Number(f.seq)
+      seen.push(f)
+    }
+  }
+}
+async function waitUntil(cond, timeoutMs, intervalMs = 1500) {
+  const deadline = Date.now() + timeoutMs
+  while (Date.now() < deadline) {
+    try {
+      if (await cond()) return true
+    }
+    catch { /* 瞬态网络/重载抖动,按条件未满足继续轮询 */ }
+    await sleep(intervalMs)
+  }
+  return false
+}
+
+// ── 1. 产线 + 模拟工况节点 ──
+const line = await api('POST', '/api/workshop/dcw/lines', { name: '四引擎演练线' })
+const dcw = await api('POST', '/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: '演练温度设定器', driver: 'mock', lineId: line?.data?.line?.id })
+const daq = await api('POST', '/api/workshop/daq', { templateRef: 'daq-temp-tc', name: '演练温度采集', driver: 'mock', lineId: line?.data?.line?.id, intervalMs: 1000 })
+const dcwId = dcw?.data?.node?.id
+const daqId = daq?.data?.node?.id
+check('产线+数控节点+数采节点(mock 工况)创建', !!dcwId && !!daqId, `dcw=${dcwId} daq=${daqId}`)
+
+// ── 2. 四引擎班组 ──
+const ch = await api('POST', '/api/workshop/channels', {
+  name: '四引擎班组演练',
+  leadAgent: { name: 'lead-omp', harness: 'omp', config: { provider: 'zhipu-coding-plan', model: 'glm-5.2' } },
+})
+const cid = ch?.data?.channelId
+check('创建班组(lead=omp)', !!cid)
+startWs(cid)
+
+async function addWorker(name, harness, config) {
+  const w = await api('POST', `/api/workshop/channels/${cid}/agents`, { name, harness, role: 'worker', config })
+  return w?.data?.id ?? null
+}
+const dsh = await addWorker('worker-dsh', 'dsh', { promptTimeoutMs: 480_000 })
+// codex 需 per-agent CODEX_HOME(种子化全局凭据/网关配置;impl 追加 [mcp_servers.aw] 平台工具面)
+const { mkdtempSync, copyFileSync, existsSync } = await import('node:fs')
+const { tmpdir, homedir } = await import('node:os')
+const { join } = await import('node:path')
+const codexHome = mkdtempSync(join(tmpdir(), 'aw-drill-codex-'))
+for (const f of ['auth.json', 'config.toml', 'cc-switch-model-catalog.json']) {
+  try { if (existsSync(join(homedir(), '.codex', f))) copyFileSync(join(homedir(), '.codex', f), join(codexHome, f)) } catch { /* ignore */ }
+}
+const codex = await addWorker('worker-codex', 'codex', { codexHome, approvalPolicy: 'on-request', sandbox: 'workspace-write', promptTimeoutMs: 480_000, systemPromptPrefix: '执行要直接:按指令调用平台工具并汇报,不探索文件系统。' })
+const ocTmp = (await import('node:fs')).mkdtempSync((await import('node:os')).tmpdir() + '/aw-drill-oc-')
+const ocCfg = (await import('node:fs')).mkdtempSync((await import('node:os')).tmpdir() + '/aw-drill-occ-')
+try { (await import('node:fs')).mkdirSync(ocTmp + '/opencode', { recursive: true }); (await import('node:fs')).copyFileSync((await import('node:os')).homedir() + '/.local/share/opencode/auth.json', ocTmp + '/opencode/auth.json') } catch { /* ignore */ }
+const opencode = await addWorker('worker-opencode', 'opencode', { promptTimeoutMs: 480_000, model: 'zhipuai-coding-plan/glm-5.3-flash', dataDir: ocTmp, configDir: ocCfg, baseUrl: BASE })
+check('三 worker 入组(dsh/codex/opencode)', !!dsh && !!codex && !!opencode, `dsh=${dsh?.slice(0, 8)} codex=${codex?.slice(0, 8)} oc=${opencode?.slice(0, 8)}`)
+
+// ── 3. 绑定工业节点 ──
+await api('POST', '/api/workshop/agent-tools/bindings', { agentId: dsh, nodeId: daqId, kind: 'daq', mode: 'auto' })
+await api('POST', '/api/workshop/agent-tools/bindings', { agentId: codex, nodeId: dcwId, kind: 'dcw', mode: 'manual' })
+await api('POST', '/api/workshop/agent-tools/bindings', { agentId: opencode, nodeId: dcwId, kind: 'dcw', mode: 'manual' })
+check('绑定完成(dsh↔DAQ auto;codex/opencode↔DCW manual)', true)
+
+// ── 4. 团队作业(单 goal,三步,指令点对点到人)──
+const task = await api('POST', `/api/workshop/channels/${cid}/tasks`, {
+  title: '四引擎数采数控联调',
+  mode: 'goal',
+  description: [
+    '按以下分工执行,每步只做一次,不要额外发挥:',
+    '1. worker-dsh:用 daq_query 工具查询你绑定的温度采集节点最近 5 分钟数据,把样本数与均值汇报给 lead;',
+    '2. worker-codex:用 dcw_control 工具把你绑定的「演练温度设定器」写入 172.0(会触发人工审批,等待批准后再继续),然后用 dcw_read 复读并把读数汇报给 lead;',
+    '3. worker-opencode:用 dcw_read 工具读取你绑定的「演练温度设定器」当前设定值,汇报给 lead;',
+    '4. lead:三项结果齐后调用 complete_task 汇总。',
+  ].join('\n'),
+})
+const taskId = task?.data?.id
+check('团队作业 goal 已提交', !!taskId, `taskId=${taskId?.slice(0, 8)}`)
+
+// ── 5. HITL:审批到达即批准 ──
+const approvalsDone = new Set()
+const approved = await waitUntil(async () => {
+  const p = await api('GET', '/api/workshop/hitl/pending')
+  const items = (p?.data?.items ?? []).filter(i => i.kind === 'dcw-approval' && !approvalsDone.has(i.id))
+  for (const item of items) {
+    log(`审批到达: ${String(item.detail ?? '').slice(0, 80)} → 批准`)
+    const r = await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: item.id, confirmed: true, comment: '演练批准' })
+    approvalsDone.add(item.id)
+    if (r?.data?.ok) log(`已批准 ${item.id}`)
+  }
+  return approvalsDone.size > 0 && (pollEvents(), seen.some(f => f.type === 'hitl.resolved' && f.payload?.outcome === 'answered'))
+}, 600_000)
+check('数控写入审批触发并批准', approved, `批准数=${approvalsDone.size}`)
+
+// ── 6. 任务闭环 + 写入落地 ──
+const done = await waitUntil(async () => {
+  const t = await api('GET', `/api/workshop/tasks/${taskId}`)
+  const st = t?.data?.state
+  if (st === 'COMPLETED' || st === 'FAILED' || st === 'CANCELED') return st
+  await pollEvents(cid)
+  return null
+}, 900_000)
+check('团队任务闭环 COMPLETED', done === 'COMPLETED', `state=${done}`)
+
+const read = await api('POST', '/api/workshop/agent-tools/invoke', { agentId: codex, tool: 'dcw_read', args: { node_id: dcwId } })
+const rb = String(read?.data?.result?.text ?? '')
+check('写入物理生效(读回 ~172)', /17[12]/.test(rb), rb.replace(/\n/g, ' ').slice(0, 110))
+
+await pollEvents(cid)
+const byType = {}
+for (const f of seen) byType[f.type] = (byType[f.type] ?? 0) + 1
+console.log('事件帧分布:', JSON.stringify(byType))
+check('事件流覆盖(task/message/hitl)', (byType['task.status'] ?? 0) > 0 && (byType['a2a.message'] ?? 0) > 0)
+
+console.log(`\n━━━ 演练结论:PASS=${passed} FAIL=${failures} ━━━`)
+try { ws?.close() } catch { /* ignore */ }
+process.exit(failures === 0 ? 0 : 1)

package/scripts/dev-guard.mjs

@@ -29,6 +29,10 @@ const { existsSync, readFileSync } = await import('node:fs')
 const { dirname, resolve } = await import('node:path')
 const { fileURLToPath: u2f } = await import('node:url')
 
+// dev 进程时间输出统一本地时区(重入实例同样生效;nitro worker 由 00-local-time 插件覆盖)
+const { installLocalIso } = await import('../shared/local-time.mjs')
+installLocalIso()
+
 const root = resolve(dirname(u2f(import.meta.url)), '..')
 
 // --- 预载 .env（与 start.mjs 同策略；已导出环境变量优先） ---
@@ -43,9 +47,13 @@ if (existsSync(envPath)) {
 
 // --- 共享配置引擎：计算有效开发端口/主机 ---
 const { loadEffective } = await import('../shared/config/engine.mjs')
+// 模式感知路径单一入口:settings/锁根必须与 start/CLI 同源,
+// 否则"检出内无 .AgentWorkShop"场景下 dev 写 data/、start 锁 home,互斥与设置双双失效。
+const { resolveRunMode } = await import('../shared/config/home.mjs')
+const rmDev = resolveRunMode({ cwd: process.cwd(), packageRoot: root, env: process.env })
 const eff = loadEffective({
-  configPath: resolve(root, 'config.yml'),
-  settingsPath: resolve(root, 'data', 'runtime-settings.json'),
+  configPath: rmDev.configPath,
+  settingsPath: rmDev.settingsPath,
   env: process.env,
   mode: 'dev',
 })
@@ -76,7 +84,7 @@ console.log(`[config] worker PORT env -> ${effectivePort}`)
 // --- 单实例互斥 + 端口占用显式报错(hardening ST-1/ST-4):不再静默换端口 ---
 {
   const { acquireLock, checkPort } = await import('../shared/config/single-instance.mjs')
-  const lock = acquireLock(resolve(root, '.AgentWorkShop'), { mode: 'dev', port: effectivePort })
+  const lock = acquireLock(rmDev.configRoot, { mode: 'dev', port: effectivePort })
   if (!lock.ok) {
     const h = lock.holder
     console.error(`✖ 已有实例在运行(pid=${h.pid}${h.port ? `,端口=${h.port}` : ''},启动于 ${h.startedAt ?? '未知'},模式=${h.mode ?? '未知'})`)

package/scripts/dev-protocol-simulators.mjs

@@ -8,6 +8,12 @@
 import net from 'node:net'
 import http from 'node:http'
 import { createRequire } from 'node:module'
+import { appendFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { installLocalIso } from '../shared/local-time.mjs'
+
+// 模拟器日志时间统一本地时区(覆盖 node-opcua 等库内部的 toISOString 输出)
+installLocalIso()
 
 const reqRoot = createRequire(import.meta.url)
 // pnpm 严格布局:mqtt-packet 是 mqtt 的传递依赖,从 mqtt 包入口路径解析
@@ -31,6 +37,14 @@ const clients = new Set()
 
 function brokerPublish(topic, payload) {
   const frame = mqttPacket.generate({ cmd: 'publish', topic, payload, qos: 0 })
+  console.log(`[mqtt-sim] route topic=${topic} clients=${clients.size} filters=[${[...clients].map(c => c.filters.join('|')).join(' ; ')}]`)
+  // 控制下行审计:broker 真实收到的路由落盘(供 e2e 做确定性验收,不依赖订阅端时序)
+  if (topic.startsWith('aw/sim/setpoint')) {
+    try {
+      appendFileSync(join(process.env.AW_SIM_AUDIT_DIR ?? '.AgentWorkShop/data', 'sim-setpoint-routes.log'), `${new Date().toISOString()} ${topic} ${payload.toString()}\n`)
+    }
+    catch { /* 审计失败不影响路由 */ }
+  }
   for (const c of clients) {
     if (c.filters.some(f => topicMatch(f, topic))) {
       try {
@@ -45,7 +59,20 @@ const mqttServer = net.createServer((sock) => {
   const client = { sock, filters: [] }
   clients.add(client)
   const parser = mqttPacket.parser({ protocolVersion: 4 })
-  sock.on('data', d => parser.parse(d))
+  sock.on('data', (d) => {
+    // 畸形帧(截断/坏头字节)只弃帧断该链,不许杀掉整个模拟工况
+    try {
+      parser.parse(d)
+    }
+    catch (err) {
+      console.error('[mqtt-sim] 弃帧(解析异常):', err instanceof Error ? err.message : err)
+      try {
+        sock.destroy()
+      }
+      catch { /* 已断 */ }
+      clients.delete(client)
+    }
+  })
   sock.on('error', () => clients.delete(client))
   sock.on('close', () => clients.delete(client))
   parser.on('packet', (packet) => {

package/scripts/e2e-harness-provider-task.mjs

@@ -0,0 +1,126 @@
+/**
+ * 多 Harness + 自定义 LLM provider 简单任务 E2E(一个 Channel,四种引擎)。
+ *   NO_PROXY='127.0.0.1,localhost' node scripts/e2e-harness-provider-task.mjs [--base http://127.0.0.1:3001]
+ *
+ * P1 provider 目录:四引擎目录均含 glm-5.3-flash(可选)
+ * P2 同 Channel 四 harness worker(omp=zhipu-coding-plan / codex=cc-switch /
+ *    opencode=zhipuai-coding-plan / dsh=ustc;模型均 glm-5.3-flash)
+ * P3 简单任务×4:真实 LLM 回合执行并 complete_task → 全部 COMPLETED(可用)
+ */
+const BASE = (() => {
+  const i = process.argv.indexOf('--base')
+  return i > 0 ? process.argv[i + 1] : 'http://127.0.0.1:3001'
+})()
+const TAG = Date.now().toString(36)
+let failures = 0
+let passed = 0
+const results = []
+const check = (id, name, ok, detail = '') => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${id} ${name}${detail ? ` — ${detail}` : ''}`)
+  results.push({ id, name, ok, detail })
+  ok ? passed++ : failures++
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const api = async (method, path, { body, token } = {}, attempt = 0) => {
+  try {
+    const res = await fetch(`${BASE}${path}`, {
+      method,
+      headers: { 'content-type': 'application/json', ...(token ? { authorization: `Bearer ${token}` } : {}) },
+      body: body !== undefined ? JSON.stringify(body) : undefined,
+    })
+    return { status: res.status, ...(await res.json().catch(() => ({}))) }
+  }
+  catch (err) {
+    if (attempt < 10) {
+      await sleep(3000)
+      return api(method, path, { body, token }, attempt + 1)
+    }
+    throw err
+  }
+}
+
+const ENGINES = [
+  { key: 'omp', harness: 'omp', cfg: { provider: 'zhipu-coding-plan', model: 'glm-5.3-flash' } },
+  { key: 'codex', harness: 'codex', cfg: { model: 'glm-5.3-flash', approvalPolicy: 'never' } },
+  { key: 'dsh', harness: 'dsh', cfg: { provider: 'ustc', model: 'glm-5.3-flash' } },
+  { key: 'opencode', harness: 'opencode', cfg: { model: 'zhipuai-coding-plan/glm-5.3-flash' } },
+]
+
+async function main() {
+  console.log(`\n━━━ 多 Harness + provider 简单任务 E2E @ ${BASE} (tag=${TAG}) ━━━`)
+  const reg = await api('POST', '/api/users/register', { body: { email: `hp-${TAG}@test.local`, password: 'Passw0rd!123', name: `hp-${TAG}` } })
+  const token = reg.data?.token
+  if (!token) throw new Error('注册失败')
+  const auth = { token }
+
+  // ── P1 provider 目录(可选性) ──
+  for (const e of ENGINES) {
+    const r = await api('GET', `/api/workshop/harnesses/${e.harness}/providers`, auth)
+    const provs = r.data?.catalog?.providers ?? []
+    const has = provs.some(p => p.models.some(m => m.id === 'glm-5.3-flash'))
+    check(`P1.${e.key}`, `${e.harness} 目录含 glm-5.3-flash(可选)`, has, provs.map(p => p.id).join(',').slice(0, 60))
+  }
+
+  // ── P2 同 Channel 组建(不同 harness worker + 自定义 provider/model) ──
+  const ch = (await api('POST', '/api/workshop/channels', {
+    body: {
+      name: `harness-mix-${TAG}`,
+      leadAgent: { name: `lead-${TAG}`, harness: 'mock', config: { delayMs: 60 } },
+    }, ...auth,
+  })).data
+  const channelId = ch?.channelId
+  check('P2.1', 'Channel 创建(mock lead)', Boolean(channelId))
+  const workers = {}
+  for (const e of ENGINES) {
+    const c = await api('POST', '/api/workshop/agents', {
+      body: { name: `${e.key}-${TAG}`, harness: e.harness, config: { ...e.cfg, systemPromptPrefix: '你是测试执行员:严格按任务完成,完成后立即调用 complete_task。' } }, ...auth,
+    })
+    workers[e.key] = c.data
+    check(`P2.${e.key}-tpl`, `${e.harness} 模板(provider=${e.cfg.provider ?? 'default'},model=${e.cfg.model})`, Boolean(c.data?.id))
+    const join = await api('POST', `/api/workshop/channels/${channelId}/agents`, { body: { agentId: c.data.id, role: 'worker' }, ...auth })
+    if (join.code !== 0) check(`P2.${e.key}-join`, `${e.key} 入队`, false, join.message ?? '')
+  }
+  const members = (await api('GET', `/api/workshop/channels/${channelId}/agents`, auth)).data ?? []
+  check('P2.join', '四引擎 worker 全部入队(5 成员)', members.length >= 5, `members=${members.length}`)
+
+  // ── P3 简单任务×4(真实 LLM 回合) ──
+  const tasks = {}
+  for (const e of ENGINES) {
+    const t = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
+      body: {
+        title: `smoke-${e.key}-${TAG}`,
+        parts: [{ text: '请直接汇报「 Harness 冒烟测试完成」六个字所在的环境时间,然后立即调用 complete_task。不要执行任何其它操作。' }],
+        assigneeId: workers[e.key].id,
+      }, ...auth,
+    })
+    tasks[e.key] = t.data?.task?.id ?? t.data?.id
+  }
+  check('P3.1', '四路简单任务下发', Object.values(tasks).every(Boolean))
+
+  const states = {}
+  const deadline = Date.now() + 16 * 60_000
+  while (Date.now() < deadline && Object.keys(states).length < 4) {
+    const list = await api('GET', `/api/workshop/channels/${channelId}/tasks`, auth)
+    for (const [k, id] of Object.entries(tasks)) {
+      if (states[k]) continue
+      const me = (list.data ?? []).find(x => x.id === id)
+      if (me && ['COMPLETED', 'FAILED', 'CANCELED'].includes(me.state)) states[k] = me.state
+    }
+    await sleep(6000)
+  }
+  for (const e of ENGINES) {
+    check(`P3.${e.key}`, `${e.harness}(glm-5.3-flash) 简单任务 COMPLETED`, states[e.key] === 'COMPLETED', `state=${states[e.key] ?? 'RUNNING'}`)
+  }
+
+  // ── 清理 ──
+  await api('DELETE', `/api/workshop/channels/${channelId}?purge=1`, auth).catch(() => {})
+
+  console.log(`\n━━━ 多 Harness provider E2E: ${passed} passed / ${failures} failed ━━━`)
+  if (failures) for (const r of results.filter(x => !x.ok)) console.log(`  ${r.id} ${r.name} — ${r.detail}`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((err) => {
+  console.error('FATAL', err)
+  process.exit(1)
+})